$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e7e4ac-53f5-3cb9-8c09-e50f8a464529.roa File: 23e7e4ac-53f5-3cb9-8c09-e50f8a464529.roa (raw, json) Hash identifier: r2sw/5sHpVdYMIG6uezhXP/exx8i9dQl/RUOmS//Ao8= Subject key identifier: 92:52:A6:FB:91:09:D7:EB:C4:1D:6A:D8:DA:F9:A4:9D:BB:07:E8:14 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD19B00620EF24563D2AF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e7e4ac-53f5-3cb9-8c09-e50f8a464529.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.37.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:9b:00:62:0e:f2:45:63:d2:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=fed01725-e40a-46f2-b6ba-4aa30a748c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:16:b8:81:cf:4a:f5:af:8e:37:03:32:e8:d8: 94:f5:52:a5:36:13:34:ec:12:8a:d2:34:52:37:5b: bd:a2:a6:e4:da:37:9a:d5:c0:84:91:61:07:cc:a4: 79:31:cc:fa:27:2f:6e:0f:27:61:f8:df:bd:b8:36: 55:00:b3:69:0f:4d:8e:9c:1a:69:50:c5:4b:e0:7e: f6:11:d6:58:92:65:03:64:0d:b8:fd:0f:64:11:0f: 9f:91:02:f6:04:47:9c:83:c9:1f:16:3d:b0:b7:31: bc:18:77:34:69:13:e6:c7:32:8d:63:62:a6:2f:00: 1d:23:4d:e3:34:fd:40:72:b3:18:d8:50:28:a0:1e: 2a:9d:fc:b9:8c:a8:34:fe:50:c9:63:c2:d6:7a:22: 49:81:8d:fa:e4:08:c8:43:fc:d7:19:ac:fa:29:6f: fe:27:fd:3d:a1:82:9c:7d:13:1c:da:b4:a9:a2:66: 71:cd:04:33:37:9b:f1:41:35:5a:dc:89:e7:e5:8f: 0e:29:19:b9:75:bf:8e:4e:94:89:01:7d:43:75:fd: 2d:18:ee:c1:e4:45:16:e7:d0:12:18:87:15:96:48: 37:01:d3:e1:3c:9b:aa:04:c3:d0:8d:fe:14:3f:09: f0:64:ee:8e:14:c1:ed:0c:af:5d:2a:20:37:08:6c: 71:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:52:A6:FB:91:09:D7:EB:C4:1D:6A:D8:DA:F9:A4:9D:BB:07:E8:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e7e4ac-53f5-3cb9-8c09-e50f8a464529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:02:83:9e:34:ca:9a:07:d0:d2:43:5c:03:fb:34:56:09:d7: c6:fd:d6:1a:e7:f1:07:89:cb:d3:12:1e:05:17:88:76:ef:32: 49:a8:bc:e2:e8:2d:3d:ca:10:6a:70:52:4e:ef:75:e9:a3:0e: 14:38:a2:7b:99:b6:73:80:92:8f:16:db:16:bd:18:34:30:cb: 4d:38:ed:4b:89:cc:71:45:2e:e4:83:a1:1e:9d:29:86:02:0e: 4f:ce:d8:1c:ad:d6:fe:46:b3:64:76:b6:a1:83:36:58:0d:5c: 4c:52:a8:6a:1d:67:bf:cb:08:cb:ff:8f:78:75:03:6e:24:6c: 55:24:a2:3b:a6:57:27:b7:53:7f:f7:8b:7e:84:90:98:51:5a: 55:07:c2:6c:10:82:08:15:60:af:3d:eb:80:7e:0c:3c:ed:d4: 80:96:2c:42:ce:85:e8:79:55:77:e9:63:a6:3a:14:fd:61:b4: 57:f1:12:07:8b:b7:6e:6d:0e:8f:0e:bb:75:ba:b0:ff:a2:b1: 23:81:bc:ce:05:5e:8e:fc:ec:d4:25:21:88:8c:0f:ac:ed:b7: f0:50:9e:5d:c7:1c:99:d4:a8:b0:9d:0a:a7:50:00:ef:0c:82: 07:16:57:c8:20:c8:6b:fb:56:bc:d9:e7:d1:26:c2:ad:8d:bf: eb:aa:5a:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZsAYg7yRWPSrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZmVkMDE3MjUtZTQwYS00NmYyLWI2YmEtNGFhMzBhNzQ4YzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxa4gc9K9a+ONwMy6NiU9VKlNhM07BKK0jRS N1u9oqbk2jea1cCEkWEHzKR5Mcz6Jy9uDydh+N+9uDZVALNpD02OnBppUMVL4H72 EdZYkmUDZA24/Q9kEQ+fkQL2BEecg8kfFj2wtzG8GHc0aRPmxzKNY2KmLwAdI03j NP1AcrMY2FAooB4qnfy5jKg0/lDJY8LWeiJJgY365AjIQ/zXGaz6KW/+J/09oYKc fRMc2rSpomZxzQQzN5vxQTVa3Inn5Y8OKRm5db+OTpSJAX1Ddf0tGO7B5EUW59AS GIcVlkg3AdPhPJuqBMPQjf4UPwnwZO6OFMHtDK9dKiA3CGxxiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJSpvuRCdfrxB1q2Nr5pJ27B+gUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjNlN2U0YWMtNTNmNS0z Y2I5LThjMDktZTUwZjhhNDY0NTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyV7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACICg540ypoH0NJDXAP7NFYJ18b91hrn8QeJy9MSHgUXiHbvMkmovOLo LT3KEGpwUk7vdemjDhQ4onuZtnOAko8W2xa9GDQwy0047UuJzHFFLuSDoR6dKYYC Dk/O2Byt1v5Gs2R2tqGDNlgNXExSqGodZ7/LCMv/j3h1A24kbFUkojumVye3U3/3 i36EkJhRWlUHwmwQgggVYK8964B+DDzt1ICWLELOheh5VXfpY6Y6FP1htFfxEgeL t25tDo8Ou3W6sP+isSOBvM4FXo787NQlIYiMD6ztt/BQnl3HHJnUqLCdCqdQAO8M ggcWV8ggyGv7VrzZ59Emwq2Nv+uqWk8= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:31 2025 by rpki-client